Sign in
Auth

Generate a login token

Generate a login token. If the visitor is already logged into a XenForo account, they will not be logged into the specified account. Only available to super user keys.

post/auth/login-token

Response

OK

login_tokenstring
login_urlstring

Direct user to this URL to trigger a login

expiry_dateinteger

Unix timestamp of when the token expires. An error will be displayed if the token is expired or invalid

Changes

Changed in 2 of the 7 revisions of this API.2410

  • e271d0e41f6d25See the full diff
    • ▲

      request body became required

      request-body-became-required

    • ▲

      removed the media type application/json from the request body

      request-body-media-type-removed

    • ○

      api operation id post_auth_login_token removed and replaced with postAuthLoginToken

      api-operation-id-removed

    • ○

      the endpoint scheme security XF-Api-Key was added to the API

      api-security-added

    • ○

      the endpoint scheme security XF-OAuth2 was added to the API

      api-security-added

    • ○

      added the new optional header request parameter XF-Api-User to all path's operations

      new-optional-request-default-parameter-to-existing-path

    • ○

      added the new optional query request parameter api_bypass_permissions to all path's operations

      new-optional-request-default-parameter-to-existing-path

    This revision also has 3 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

  • fc0a40f3b85945See the full diff
    • ●

      the optional response header XF-Latest-Api-Version removed for the status 200

      optional-response-header-removed

    • ●

      the optional response header XF-Request-User removed for the status 200

      optional-response-header-removed

    • ●

      the optional response header XF-Request-User-Extras removed for the status 200

      optional-response-header-removed

    • ●

      the optional response header XF-Used-Api-Version removed for the status 200

      optional-response-header-removed

    • ○

      api operation id postAuthLoginToken removed and replaced with post_auth_login_token

      api-operation-id-removed

    • ○

      the endpoint scheme security XF-Api-Key was removed from the API

      api-security-removed

    • ○

      the endpoint scheme security XF-OAuth2 was removed from the API

      api-security-removed

    • ○

      request body became optional

      request-body-became-optional

    • ○

      added the media type application/json to the request body

      request-body-media-type-added

    This revision also has 18 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog